unify the upload/method handling (CVE-2023-28322)
fix host name wildcard checking (CVE-2023-28321)

adapt the fix of CVE-2023-27535 for RHEL 9 curl

fix SSH connection too eager reuse still (CVE-2023-27538)
fix GSS delegation too eager connection re-use (CVE-2023-27536)
fix FTP too eager connection reuse (CVE-2023-27535)
fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
fix TELNET option IAC injection (CVE-2023-27533)

fix HTTP multi-header compression denial of service (CVE-2023-23916)

smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552)

fix POST following PUT confusion (CVE-2022-32221)

control code in cookie denial of service (CVE-2022-35252)

fix unpreserved file permissions (CVE-2022-32207)
fix HTTP compression denial of service (CVE-2022-32206)
fix FTP-KRB bad message verification (CVE-2022-32208)

fix too eager reuse of TLS and SSH connections (CVE-2022-27782)

fix leak of SRP credentials in redirects (CVE-2022-27774)

add missing tests to Makefile

fix credential leak on redirect (CVE-2022-27774)
fix auth/cookie leak on redirect (CVE-2022-27776)
fix bad local IPv6 connection reuse (CVE-2022-27775)
fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)

re-disable HSTS in libcurl as an experimental feature (#2005874)

disable more protocols and features in libcurl-minimal (#2005874)

fix STARTTLS protocol injection via MITM (CVE-2021-22947)
fix protocol downgrade required TLS bypass (CVE-2021-22946)
fix use-after-free and double-free in MQTT sending (CVE-2021-22945)

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags